Malware

Win32/Injector.DYPA removal

Malware Removal

The Win32/Injector.DYPA is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/Injector.DYPA virus can do?

  • Executable code extraction
  • Injection (inter-process)
  • Injection (Process Hollowing)
  • Creates RWX memory
  • Possible date expiration check, exits too soon after checking local time
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • Executed a process and injected code into it, probably while unpacking
  • Network activity detected but not expressed in API logs
  • Creates a copy of itself
  • Anomalous binary characteristics

How to determine Win32/Injector.DYPA?


File Info:

crc32: DD30C4EB
md5: 1dfd7b8609db1bb8d8c072a307f1f246
name: 1DFD7B8609DB1BB8D8C072A307F1F246.mlw
sha1: 263b5548199591cb2694fc490e54f6f3ff838dc7
sha256: 1a4bfe9c7e0705a12652d1404448cb60fd9a4bd223536f27b7e2944f51acc322
sha512: 42eb81fea08d5a29bdcfe62259c363a1b22eea1436ec0cedd5d9217edb00b8fe98b4f4e3e0958726293fb73d7427c4e84c5bac66bef714155ccdbe693ec2fe1a
ssdeep: 12288:WSXMipasXMnpa/fQE+03qw9SBG3x7bG/ltR4SUC7pbLzM:WSXMipasXMnpa/fQq6wX3xIkSxtbU
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0409 0x04b0
InternalName: botz
FileVersion: 1.01
CompanyName: botz
Comments: Special Thanks to MaskingTape for 99% of the fullscreen code =)
ProductName: botz
ProductVersion: 1.01
OriginalFilename: botz.exe

Win32/Injector.DYPA also known as:

BkavW32.AIDetect.malware2
K7AntiVirusTrojan ( 0053404f1 )
LionicTrojan.Win32.Macrodrop.b!c
DrWebTrojan.Trick.45128
CynetMalicious (score: 99)
ALYacGen:Variant.Bulz.172352
CylanceUnsafe
ZillyaTrojan.Injector.Win32.607566
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_80% (D)
K7GWTrojan ( 0053404f1 )
Cybereasonmalicious.609db1
CyrenW32/S-80c7a63e!Eldorado
SymantecPacked.Generic.558
ESET-NOD32a variant of Win32/Injector.DYPA
APEXMalicious
AvastWin32:Malware-gen
ClamAVWin.Dropper.TrickBot-9864226-0
KasperskyTrojan-Dropper.Win32.Macrodrop.fo
BitDefenderGen:Variant.Bulz.172352
NANO-AntivirusTrojan.Win32.Trick.fdvshq
MicroWorld-eScanGen:Variant.Bulz.172352
TencentMalware.Win32.Gencirc.10b4dcab
Ad-AwareGen:Variant.Bulz.172352
SophosMal/Generic-S
ComodoTrojWare.Win32.TrojanDropper.Macrodrop.A@83wbv4
BitDefenderThetaGen:NN.ZevbaF.34236.Em0@aGmqv0oi
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.PWSZbot.gc
FireEyeGeneric.mg.1dfd7b8609db1bb8
EmsisoftGen:Variant.Bulz.172352 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojanDropper.Macrodrop.as
AviraHEUR/AGEN.1133606
eGambitUnsafe.AI_Score_94%
Antiy-AVLTrojan/Generic.ASMalwS.2690131
MicrosoftTrojan:Win32/Totbrick.H
SUPERAntiSpywareTrojan.Agent/Generic
ZoneAlarmTrojan-Dropper.Win32.Macrodrop.fo
GDataGen:Variant.Bulz.172352
TACHYONTrojan-Dropper/W32.VB-Macrodrop.495616
AhnLab-V3Trojan/Win32.Injector.R231019
McAfeeGenericRXFS-YP!1DFD7B8609DB
MAXmalware (ai score=97)
VBA32TrojanDropper.Macrodrop
MalwarebytesSpyware.TrickBot
PandaTrj/Genetic.gen
YandexTrojan.GenAsa!DpqhfRLSkUA
IkarusTrojan.Win32.Injector
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/GenKryptik.CCAH!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Win32/Injector.DYPA?

Win32/Injector.DYPA removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment